Blacklist for usernames, display names and collection names (bug 1024630)

WiP: I still need to test the admin part.
I don't have any preference here except being consistent across tests. Let's discuss that on IRC.